Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 22nd May 2007, 02:38
the_spy the_spy is offline
Member
 
Join Date: May 2007
Posts: 91
Thanks: 20
Thanked 6 Times in 6 Posts
Default real ssl certificate in apache+postfix+ispconfig

I have a server my.server.com and I'm using this name for ispconfig panel, apache, and postfix, and I want to buy a real ssl certificate for this name my.server.com to put it in the 2 apache configurations and in postfix.

For the normal apache it should not be a problem with the panel, but for the ispconfig apache, if I put my own server.csr and .crt files to replace the actual self signed certificate files, will they stay even in future upgrades of ispconfig ?

Then for postfix, I see that there is also a .pem file with the .csr and .crt, I'm not sure which file it is exactly and how we could have it ?

And finally, will the certificate work for smtp and imap, or is there an other way for imap ?

Thanks
Reply With Quote
Sponsored Links
  #2  
Old 22nd May 2007, 10:17
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,461
Thanks: 813
Thanked 5,240 Times in 4,108 Posts
Default

Quote:
For the normal apache it should not be a problem with the panel, but for the ispconfig apache, if I put my own server.csr and .crt files to replace the actual self signed certificate files, will they stay even in future upgrades of ispconfig ?
yes.

Quote:
Then for postfix, I see that there is also a .pem file with the .csr and .crt, I'm not sure which file it is exactly and how we could have it ?
I'am not sure which SSL cert format postfix needs.

Quote:
And finally, will the certificate work for smtp and imap, or is there an other way for imap ?
The pop3 and imap server has its own certificate.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 22nd May 2007, 11:25
the_spy the_spy is offline
Member
 
Join Date: May 2007
Posts: 91
Thanks: 20
Thanked 6 Times in 6 Posts
Default

ok finally for postfix, it seems that there is no need of this .pem file (at least for the thawte SSL 123 certificate I took). I just copied the .key and .crt from what ispconfig generated for the website to the .key and .crt file for postfix, and removed the .pem in the configuration, restarted postfix, and it seems that it's working great.

I needed also to restart apache2 because it seems that ispconfig did not do this after I put the certificate content in the panel for the website. I selected "Action: save the certificate" may be that's why it just saved the certificate and not restarted apache ?

Now I'm doing this for ispconfig apache, and I will search for imap. I will update this thread when I will find how to do.
Reply With Quote
  #4  
Old 22nd May 2007, 11:35
the_spy the_spy is offline
Member
 
Join Date: May 2007
Posts: 91
Thanks: 20
Thanked 6 Times in 6 Posts
Default

for ispconfig apache, it was pretty easy like postfix, just needed to replace server.key and server.crt per the files of the website, and restarted ispconfig

so.. imap now
Reply With Quote
  #5  
Old 22nd May 2007, 12:23
the_spy the_spy is offline
Member
 
Join Date: May 2007
Posts: 91
Thanks: 20
Thanked 6 Times in 6 Posts
 
Default

And here is the end of the story:

for pop3 and imap ssl, there are 2 pem files:
/etc/courier/imapd.pem
/etc/courier/pop3d.pem

you need to put the content of the .crt file in it, then the .key

finally it looks like this in each .pem file:

----BEGIN CERTIFICATE-----
crt content
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
key content
-----END RSA PRIVATE KEY-----


and restarted courier-imap-ssl and courier-pop-ssl.

Reply With Quote
The Following User Says Thank You to the_spy For This Useful Post:
lubos (19th November 2007)
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Can't enable SSL for sites in ISPConfig FeraTechInc General 7 7th December 2009 08:22
ISPConfig Update and SSL disasm Installation/Configuration 3 12th October 2008 14:55
Hostname issue with SSL Certificate request. mhpcomputerservices General 3 19th December 2006 15:25
ispconfig apache configuration it0007 Installation/Configuration 5 15th November 2006 13:34
Problem with the installation of Dokeos (LMS) in ISPConfig jofranco General 4 28th April 2006 00:45


All times are GMT +2. The time now is 01:09.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.